Mozilla Disables Insecure Java Plugin in Firefox

Summary: Mozilla began disabling older versions of the Java Deployment Toolkit plugin in Firefox to block attacks exploiting a newly discovered Java flaw that criminals were using to install malicious code. Oracle pushed a Java update on April 15 to fix the flaw, but Mozilla developers worried the patch did not fix the exploit for all Firefox users and in some cases left behind older, vulnerable versions of the plugin, with US-CERT listing the fixed plugin version as 6.0.200.2.
Bottom line: Oracle's patch brought Java to 6.0 Update 20 yet could leave the vulnerable Firefox plugin in place, and the add-on could persist even after a user uninstalled Java - so a patched machine was not necessarily a clean one.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026